Understanding and deploying Kubernetes pod security policies
As cluster-admin, you’ve probably done due diligence using RBAC to create “non-admin” users and service accounts with narrowed access, but did you know that most cluster setups give anyone the ability to create a single Pod…
TOC approves CNCF SIGs and creates security and storage SIGs
Earlier this year, the Technical Oversight Committee (TOC) voted to create CNCF Special Interest Groups (SIGs). CNCF SIGs are currently being bootstrapped in various focus areas and primarily led by recognized experts and supported by contributors. They…
Security and day 2 operations with Harbor
Widespread container adoption leads to an old problem – security and day 2 operations. Harbor is a CNCF incubating open source registry that stores, signs, and scans container images for vulnerabilities. Harbor solves common registry challenges…
Kubernetes in highly restrictive environments: meeting the needs of enterprise governance & security
Installing Kubernetes is easy. Ensuring it complies with your organization’s enterprise governance and security requirements isn’t. Oleg will outline a plan to use the technology while meeting enterprise security requirements. In this technically-focused talk, he’ll summarize…
Going Big: Harbor 1.8 takes security and replication to new heights
By Michael Michael, Harbor Core Maintainer, Director of Product Management, VMware (Twitter: @michmike77) Happy release day everyone! We are very excited to present the latest release of Harbor. The release cycle for version 1.8 was one of…
What Kubernetes does and doesn't do for security
By: Sonya Koptyev, Director of Product Marketing and Evangelism at Twistlock To say that Kubernetes provides no security features would be wrong. Kubernetes provides some functionality designed to help secure a containerized application. But it would…
Simplifying microservices security with a service mesh
This blog post contributed by Zach Jory, Head of Marketing of Aspen Mesh. One of the challenges of developing and securing microservice-based applications in large teams is that services are often developed with different languages and…
Simplifying microservices security with a service mesh
One of the challenges of developing and securing microservice-based applications in large teams is that services are often developed with different languages and frameworks. Service mesh overcomes these polyglot challenges by moving various aspects of microservice…
Operationalizing Kubernetes security best practices
As more companies scale up their Kubernetes adoption, they face growing security challenges. Kubernetes itself provides many native controls that can help organizations improve their security posture, but often they aren’t fully utilized. On this webinar,…
Istio: Security of the mesh and security in the mesh
Istio service mesh has a control plane that is responsible for configuring the proxies, enforcing policies, and observing communication through telemetry collection. According to Istio security best practices, securing the control plane should be as important…